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L A method for operating a conditional access system for broadcast applications, 
said conditional access system comprising a number of subscribers, each- subscriber 
having a terminal including a conditional access module and a secure device to store 
entitlements, wherein a source signal is encrypted using a first key (Cw), said first key 
(Cw) being changed at a high rate, said encrypted source signal being broadcasted for 

receipt: by the. terminate, wherein entitlement control messages (ECM's) are. sent to the 
secure devices, said ECM's comprising the first keys (Cw) encrypted, using a service key 
(IV), wherein entitlement management .messages (EMM's) are sent to the secure device 
providing the service key (Pr) required to decrypt encrypted first keys {Cw)< wherein a 
cracked secure device which is used m m unauthorised manner is traced by sending 
different keys required to obtain the first keys to different -terminals or groups of 
terminate and monitoring the key information provided by a pirate, wherein search 
EMM's are sen! to at least a part of the terminals, said search EMM's providing at least 
the service key (P-f ) and a dummy key (Poi Of P02), at least the .search EMM's 
comprising identifiers identifying the keys (Pr and Pm or Pas), wherein first search 
EMM's with the keys (Pr and Pot) are sent to a tot part of the terminals and second 
search EMM's wi th the keys (Pr and Foe) are sent to a second part of the terminate, 
wherein an ECM identifying the service bey (Pr) to be used to decrypt the encrypted 
first key (Cw), is sent to all .secure devices just before the first key (Cw) is needed to 
decrypt the source signal. 
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2. A method according to claim 1, wherein the encrypted source signal comprises a 
stream of data, packets* wherein successive groups including., at least one data packet, 
arc encrypted using successive first key (Cm, Cw&* » -> Cm*»jC.mh *&ch data packet 
having a flag indicating the first key (Cwi) to be used for decrypt! rig the data packet 
wherein in stead of an ECM identifyiiig the service key (Ft) an ECM identifying a 
dummy Key {I'd* ax to be used identifying a dummy key <Cw& i» $ern to the secure 
devices of the first and second parts of the terminals, respectively, just before the first 
key (Cwi) is needed to decrypt the source signal, whareAs the data packet is encrypted 
using- the previous first key (Cwm). 

3, A method according to claim. 1, wherein a set of search EMM's is sent to the 
terminals, each search EMM providing two keys (Ft and Fm, FT and Pt> 2) ~ . ft. and 
ft*). 

4. A method for operating 9 conditional access system for broadcast applications, 
mid con.ditt.onal access system comprising a number of subscribers, each subscriber 
having a terminal including a conditional access module and. a secure device to store 
entitlements, wherein ;v source signal is encrypted using a first key (Cw), said first key 
(C-tv) being dhanged at a high rate, $&id mxrypted source signal being broadcasted for 
receipt by the terminals, wherein entitlement control messages (ECM's) are sent to the 
secure devices, said ECM's comprising the first keys (Cw) encrypted using a service key 
(Pi), wherein entitlement management messages (EMM's) are sent io live secure device 
providing Ike service key (Fx) required to decrypt encrypted first keys (Cw), wherein a 
cracked secure device which is used in an unauthorized manner is traced by sending 
different keys required to obtain the first keys to different terminals or groups of 
terminals and monitoring the key information provided by a pirate, wherein a set of 
search HMM's is sent to at least sl part of lbs terminals, each search EMM of the set 
comprising a different dummy key (Po) and each EMM being sent to a different part of 
the terminal*. 
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5- A method according to claim 3, wherein, the terminals are divided into groups, 
wherein in a first search step the number of search EMM's of the set of search BMM's 
corresponds to the number of groups. 

6. A method for operating a conditional access system for broadcast applications, 
said conditional access system comprising a number of subscribers/ each subscriber 
having a terminal including a conditional access module and a secure device to store 

$n titlements, wherein a source signal is encrypted using a first key (CV), said first key 
fCw) being changed at a high rate, said encrypted source signal being broadcasied for 
receipt 'by the terminals, wherein entitlement control messages (ECM's) are sent to the 
secure devices,, said ECM's comprising the first keys (CV) encrypted using a service key 
(Pt)> wherein entitlement management messages (EMM'S) are sent to the secure device 
providing the service key (Ft) required to decrypt encrypted first keys (Gv), wherein a 
cracked secure device which is used in an xmaothorized manner is traced by sending 
different keys required to obtain the first keys to different terminals;: or groups of 
terminals and monitoring the key information provided by a pirate, wherein the source 
signal or the ECM's are encrypted using a imtltiple-key or secret-sharing cryptographic 
algorithm having a plurality of different decrypting keys or shares {G;Pj) required for 
decrypting the encrypted source signal or ECM's respectively, wherein said plurality of 
different decrypting keys or shares (Q,i\) are sent to at lea$t a part of the terminals such 
that different terminate or groups of terminals receive different keys or shares (G;Pi) 
according to a predetermined. distribution. 

7. A method according to claim 1, wherein the distribution of the terminate in 
groups of terminals is- varied to trace the cracked secure device- 




